Files
rpi-buildroot/package/python-django/python-django.mk
Thomas Perale 0955700ceb package/python-django: security bump to 5.1.15
For more details on the version bump, see the release note:
 - https://docs.djangoproject.com/en/dev/releases/5.1.15/

Fixes the following security issue:

- CVE-2025-13372:

Potential SQL injection in FilteredRelation column aliases on
PostgreSQL.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-13372

- CVE-2025-64460:

Potential denial-of-service vulnerability in XML Deserializer.

For more information, see:
  - https://nvd.nist.gov/vuln/detail/CVE-2025-64460

(cherry picked from commit 2622f9ca25cdc179ed1be3d733fb9b963a7fc5b8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-01-06 09:17:06 +01:00

28 lines
1.2 KiB
Makefile

################################################################################
#
# python-django
#
################################################################################
PYTHON_DJANGO_VERSION = 5.1.15
PYTHON_DJANGO_SOURCE = django-$(PYTHON_DJANGO_VERSION).tar.gz
# The official Django site has an unpractical URL
PYTHON_DJANGO_SITE = https://files.pythonhosted.org/packages/10/45/1ac68964193cfcc0b0912a0f68025d5bdb54f71ba7b8716e85b959874bd0
PYTHON_DJANGO_LICENSE = BSD-3-Clause, MIT (jquery, utils/archive.py), BSD-2-Clause (inlines.js)
PYTHON_DJANGO_LICENSE_FILES = LICENSE \
django/contrib/gis/measure.py \
django/contrib/gis/gdal/LICENSE \
django/contrib/gis/geos/LICENSE \
django/contrib/admin/static/admin/js/inlines.js \
django/contrib/admin/static/admin/js/vendor/jquery/LICENSE.txt \
django/contrib/admin/static/admin/js/vendor/select2/LICENSE.md \
django/contrib/admin/static/admin/js/vendor/xregexp/LICENSE.txt \
django/contrib/admin/static/admin/img/LICENSE \
django/dispatch/license.txt \
django/utils/archive.py
PYTHON_DJANGO_CPE_ID_VENDOR = djangoproject
PYTHON_DJANGO_CPE_ID_PRODUCT = django
PYTHON_DJANGO_SETUP_TYPE = setuptools
$(eval $(python-package))